COULEURS LAGON WEBSITE DATA PRIVACY POLICY
PREAMBLE
COULEURS LAGON is committed to ensuring that the collection and processing of your data is carried out lawfully, fairly, and transparently, in accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act of 1978.
The collection of personal data from its prospects and customers is limited to what is strictly necessary, in accordance with the principle of data minimisation. It specifies the purposes for which this data is collected, whether providing this data is optional or mandatory to manage requests, and who may access it.
DEFINITIONS
The Publisher: COULEURS LAGON, Mr. Charles Jutteau, operating as a sole proprietorship under RID number 1 127 380, residing at BP 4888 98847 NOUMEA CEDEX
Telephone: +687 94 79 04
Contact address: BP 4888 98847 NOUMEA CEDEX
The Site: All website(s), web pages, and online service(s) offered by COULEURS LAGON, which operates the site(s) accessible at the following URL(s):
Site address: www.couleurslagon.com
Site address: https://www.facebook.com/CouleursLagonOfficial/
The User: The person using the Site and its services.
NATURE OF DATA COLLECTED
As part of the use of the Sites, to provide a remote sales service, pre- and post-sales support, help, guides, and product and service offers tailored to users' needs, COULEURS LAGON may collect the following categories of data concerning its Users:
Civil status, identity, and identification data (name, surname, email, date of birth, profession, telephone number, etc.)
Data related to personal life (lifestyle habits, family situation, excluding sensitive or dangerous data)
Data related to professional life (CV, education, professional training, distinctions, etc.)
Economic and financial information (income, financial situation, tax situation, etc.)
Connection data (IP addresses, event logs, etc.)
Location data (movements, GPS data, GSM, etc.)
COULEURS LAGON undertakes to maintain a written record of all categories of processing activities carried out as the data controller for the aforementioned data.
USER INFORMATION AND RIGHTS
Hereby, COULEURS LAGON clearly informs you about the processing of personal data that we implement as part of our activity, how data is collected, used, and protected.
Any User, by sending an email to contact@couleurslagon.com, has the right to request from the data controller, i.e., COULEURS LAGON:
Access to the personal data provided;
Rectification or erasure of this data;
Restriction of processing relating to their person;
To object to processing;
Data portability;
To lodge a complaint with the CNIL.
SUBCONTRACTING
COULEURS LAGON undertakes to ensure that any subcontractor provides sufficient contractual guarantees regarding the implementation of appropriate technical and organisational measures, so that the processing complies with the requirements of the European data protection regulation.
COULEURS LAGON may use one or more subcontractors to carry out specific processing activities, which will be subject to the terms of this Policy. No subcontractor will be authorised to use a sub-subcontractor without the prior written authorisation of COULEURS LAGON.
DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
Disclosure to authorities based on legal obligations
Based on legal obligations, your personal data may be disclosed pursuant to a law, regulation, or a decision from a competent regulatory or judicial authority.
In general, we commit to complying with all legal rules that might prevent, limit, or regulate the dissemination of information or data, and in particular to comply with Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, and the European Union's General Data Protection Regulation (GDPR).
Disclosure to third parties based on account settings
Your personal data is strictly confidential and cannot be disclosed to third parties, except with express agreement obtained via your account settings.
Disclosure to third parties for commercial solicitation for equivalent products and services
If you have made a purchase on our Site, we may, with our partners and occasionally, keep you informed of our new products, news, and special offers, by email, postal mail, and telephone, regarding products or services similar to those you ordered.
Disclosure to third parties in aggregated and anonymised form
Your personal data may be used to enrich our databases. It may be transmitted to third parties after being anonymised and exclusively for statistical purposes.
Disclosure to third-party partners
We may make certain personal data available to strategic partners working with us, for the provision of products and services or helping us market our products to customers.
Disclosure to third parties with recipient restrictions
The personal data you provide to us when placing your order is transmitted to our suppliers and subsidiaries for processing. This information is considered strictly confidential by our suppliers and subsidiaries.
Disclosure to third parties for direct marketing
We may share information with advertising partners to send you promotional communications, or to show you more tailored content, including advertising relevant to products and services that may be of interest to you, and to understand how users interact with advertisements.
Commitment to the applicability of the privacy policy
In the event of disclosure of your personal data to a third party, COULEURS LAGON will ensure that the third party is required to apply privacy conditions identical to those of the Site.
PRIOR INFORMATION FOR THE DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES IN CASE OF MERGER / ACQUISITION
Prior information and opt-out possibility before and after merger / acquisition
Should we take part in a merger, acquisition, or any other form of asset transfer, we undertake to guarantee the confidentiality of your personal data and to inform you before it is transferred or subject to new privacy rules.
DATA AGGREGATION
Aggregation with non-personal data
We may publish, disclose, and use aggregated information (information relating to all our Users or to specific groups or categories of Users that we combine in such a way that an individual User can no longer be identified or mentioned) and non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes, and other commercial purposes.
Aggregation with personal data available on the User's social accounts
If you connect your account to an account of another service for cross-posting, that service may provide us with your profile information, connection information, and any other information you have authorised to be disclosed. We may aggregate information relating to all our other Users, groups, accounts, with personal data available on the User.
COLLECTION OF IDENTITY DATA
Registration and prior identification for service provision
Use of the Site requires prior registration and identification. Your nominative data (name, surname, company, postal address, email, telephone, mobile number) is used to fulfil our legal obligations resulting from the delivery of products and/or services as provided in the order.
You will not provide false nominative information and will not create an account for another person without their permission. Your contact details must always be accurate and up-to-date.
COLLECTION OF IDENTIFICATION DATA
Use of user identifier for connection proposals and commercial offers
We use your electronic identifiers to search for existing relationships by connection, email address, or services. We may use your contact information to allow others to find your account, including through third-party services and client applications. You can upload your address book so that we can help you find acquaintances on our network or to allow other Users of our network to find you. We may offer suggestions to you and other Users of the network, based on contacts imported from your address book. We may partner with companies that offer incentive offers. To support this type of promotion and incentive offer, we may share your electronic identifier.
GEOLOCATION
Geolocation for service provision purposes
We collect and process your geolocation data to provide you with our services. We may use personal data to determine your real-time geographical position. In accordance with your right to object provided for by Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, you have the possibility, at any time, to deactivate geolocation functions.
Geolocation for cross-referencing purposes
We collect and process your geolocation data to allow our services to identify cross-points in time and space with other Users of the service in order to present you with the profile of crossed Users. In accordance with your right to object provided for by Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, you have the possibility, at any time, to deactivate geolocation functions. You then acknowledge that the service will no longer be able to present you with profiles of other Users.
Geolocation with availability to partners for referencing and aggregation (with opt-in)
We may collect and process your geolocation data with our partners. We undertake to anonymise the data used. In accordance with your right to object provided for by Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, you have the possibility, at any time, to deactivate geolocation functions.
COLLECTION OF TERMINAL DATA
Collection of profiling data and technical data for service provision purposes
Some technical data from your device is automatically collected by the Site. This information notably includes your IP address, internet service provider, hardware configuration, software configuration, browser type and language, etc. The collection of this data is necessary for the provision of services.
Collection of technical data for advertising, commercial, and statistical purposes
The technical data from your device is automatically collected and recorded by the Site for advertising, commercial, and statistical purposes. This information helps us to continuously personalize and improve your experience on our Site. We do not collect or retain any nominative data (name, surname, address, etc.) that may be attached to technical data. The collected data may be resold to third parties.
COOKIES
Cookie retention period
In accordance with CNIL recommendations, the maximum retention period for cookies is 13 months after their first deposit on the User's terminal, as is the validity period of the User's consent to the use of these cookies. The lifespan of cookies is not extended with each visit. The User's consent must therefore be renewed after this period.
Cookie purpose
Cookies may be used for statistical purposes, particularly to optimize the services provided to the User, based on the processing of information concerning access frequency, page personalization, as well as operations performed and information consulted.
You are informed that COULEURS LAGON may place cookies on your terminal. The cookie records information relating to navigation on the service (pages you have consulted, date and time of consultation, etc.) that we may read during your subsequent visits.
User's right to refuse cookies, with deactivation resulting in degraded service functionality
You acknowledge having been informed that COULEURS LAGON may use cookies, and you authorize it. If you do not want cookies to be used on your terminal, most browsers allow you to deactivate cookies via the settings options. However, you are informed that some services may no longer function correctly.
Possible association of cookies with personal data to enable service operation
COULEURS LAGON may collect browsing information through the use of cookies.
RETENTION OF TECHNICAL DATA
Technical data retention period
Technical data is retained for the period strictly necessary to achieve the purposes mentioned above.
PERSONAL DATA RETENTION PERIOD [AND ANONYMISATION]
Data retention during the contractual relationship
In accordance with Article 6-5° of Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, personal data subject to processing is not retained beyond the time necessary to fulfil the obligations defined during the conclusion of the contract or the predefined duration of the contractual relationship.
Retention of anonymised data beyond the contractual relationship / after account deletion
We retain personal data for the period strictly necessary to achieve the purposes described in this Policy. Beyond this period, it will be anonymised and retained for exclusively statistical purposes and will not be used in any way whatsoever.
Data deletion after account deletion
Data purging mechanisms are put in place to provide for its effective deletion once the retention or archiving period necessary for the fulfilment of determined or imposed purposes has been reached.
In accordance with Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, you also have the right to delete your data, which you can exercise at any time by contacting COULEURS LAGON.
Data deletion after 3 years of inactivity
For security reasons, if you have not logged in to the Site or have not been active (clicked on a link) for a period of three years, you will receive an email inviting you to log in as soon as possible, otherwise your data will be deleted from our databases.
ACCOUNT DELETION
Account deletion on request
The User has the possibility to delete their Account at any time, by simply requesting it from COULEURS LAGON or via the Account deletion menu in the Account settings, if applicable.
Account deletion in case of Privacy Policy violation
In the event of a violation of one or more provisions herein or any other document incorporated herein by reference, COULEURS LAGON reserves the right to terminate or restrict, without prior warning and at its sole discretion, your use and access to the services, your account, and all Sites.
INDICATIONS IN CASE OF A SECURITY BREACH DETECTED BY COULEURS LAGON
User information in case of a security breach
We commit to implementing all appropriate technical and organizational measures through physical and logistical security means to guarantee a level of security adapted to the risks of accidental, unauthorized, or illegal access, disclosure, alteration, loss, or destruction of your personal data.
In the event that we become aware of illegal access to your personal data stored on our servers or those of our service providers, or unauthorized access resulting in the realization of the risks identified above, we commit to:
Notifying you of the incident as soon as possible if this meets a legal requirement;
Investigating the causes of the incident;
Taking necessary measures within reasonable limits to mitigate the negative effects and damages that may result from the said incident.
Limitation of liability
In no case can the commitments defined in the point above relating to notification in case of a security breach be assimilated to any recognition of fault or responsibility for the occurrence of the incident in question.
TRANSFER OF PERSONAL DATA ABROAD
Data transfer to countries with an equivalent level of protection
COULEURS LAGON commits to complying with the applicable regulations relating to data transfers to foreign countries, particularly according to the following modalities:
COULEURS LAGON transfers the personal data of its Users to countries recognized as offering an equivalent level of protection.
COULEURS LAGON transfers the personal data of its Users outside of countries recognized by the CNIL as having a sufficient level of protection: COULEURS LAGON has obtained authorization from the CNIL to proceed with this transfer.
To know the list of these countries: CNIL - Data protection in the world
MODIFICATION OF THE PRIVACY POLICY
In the event of a modification to these terms, COULEURS LAGON undertakes not to substantially lower the level of confidentiality without prior information to the persons concerned.
DATA PORTABILITY
COULEURS LAGON undertakes to offer you the possibility of having all your data returned to you upon simple request. The User is thus guaranteed better control over their data and retains the possibility of reusing it. This data must be provided in an open and easily reusable format, directly into the hands of another data controller when desired and technically possible.
APPLICABLE LAW AND LANGUAGE
This Privacy Policy is governed by French law. They are written in French. In the event that they are translated into one or more languages, only the French text shall prevail in case of dispute. The nullity of a clause does not entail the nullity of the Privacy Policy. The temporary or permanent non-application of one or more clauses herein by COULEURS LAGON shall not constitute a waiver on its part of the other clauses herein which continue to produce their effects.
DISPUTES AND JURISDICTION
ANY DISPUTE TO WHICH THE PRIVACY POLICY MAY GIVE RISE, PARTICULARLY CONCERNING ITS VALIDITY, INTERPRETATION, AND EXECUTION, THEIR CONSEQUENCES AND FOLLOW-UP, SHALL BE SUBMITTED TO THE COMPETENT COURTS IN THE JURISDICTION OF THE CITY OF NOUMEA
